Purple News
- Monitoring High Risk Azure Logins
- How to Put Yourself Out There – Networking on Social Media
- How to Get a Job in Cybersecurity
- Crafting the Perfect Prompt: Getting the Most Out of ChatGPT and Other LLMs
- How to Perform and Combat Social Engineering
- Ghost in the Wireless: An introduction to Airspace Analysis with Kismet
- Mental Health – An Infosec Challenge
- WifiForge – WiFi Exploitation for the Classroom
- Build a Home Lab: Equipment, Tools, and Tips
- Auditing GitLab: Public Gitlab Projects on Internal Networks
- Throwback Thursday | I Got an Alert, Now What?
- Throwback Thursday | Why Developers Hate Infosec
- Throwback Thursday | Exploiting Persistent XSS
- Throwback Thursday | Hackers in the Boardroom
- Throwback Thursday | Tool Demo – Riverside
- Throwback Thursday | The Fools Gold Rush to Compliance
- Throwback Thursday | Is the PKI Sky Falling?
- Throwback Thursday | What’s Old is Gold
- Throwback Thursday | Wireless Attack Killchain for N00bs
- Throwback Thursday | Six Things No One !@#$%^& Told Me About Pentesting
- Best EDR Of The Market (BEOTM) – Endpoint Detection and Response Testing Tool
- AgentSmith HIDS – Host Based Intrusion Detection
- padre – Padding Oracle Attack Exploiter Tool
- Privacy Implications of Web 3.0 and Darknets
- DataSurgeon – Extract Sensitive Information (PII) From Logs
- Pwnagotchi – Maximize Crackable WPA Key Material For Bettercap
- HardCIDR – Network CIDR and Range Discovery Tool
- Socialscan – Command-Line Tool To Check For Email And Social Media Username Usage
- CFRipper – CloudFormation Security Scanning & Audit Tool
- CredNinja – Test Credential Validity of Dumped Credentials or Hashes
- Ashok - A OSINT Recon Tool, A.K.A Swiss Army Knife
- CloudBrute - Awesome Cloud Enumerator
- Hfinger - Fingerprinting HTTP Requests
- VulnNodeApp - A Vulnerable Node.Js Application
- XMGoat - Composed of XM Cyber terraform templates that help you learn about common Azure security issues
- Extrude - Analyse Binaries For Missing Security Features, Information Disclosure And More...
- BokuLoader - A Proof-Of-Concept Cobalt Strike Reflective Loader Which Aims To Recreate, Integrate, And Enhance Cobalt Strike's Evasion Features!
- Volana - Shell Command Obfuscation To Avoid Detection Systems
- CyberChef - The Cyber Swiss Army Knife - A Web App For Encryption, Encoding, Compression And Data Analysis
- NativeDump - Dump Lsass Using Only Native APIs By Hand-Crafting Minidump Files (Without MinidumpWriteDump!)
- Sttr - Cross-Platform, Cli App To Perform Various Operations On String
- PIP-INTEL - OSINT and Cyber Intelligence Tool
- Thief Raccoon - Login Phishing Tool
- X-Recon - A Utility For Detecting Webpage Inputs And Conducting XSS Scans
- ROPDump - A Command-Line Tool Designed To Analyze Binary Executables For Potential Return-Oriented Programming (ROP) Gadgets, Buffer Overflow Vulnerabilities, And Memory Leaks
- Startup-SBOM - A Tool To Reverse Engineer And Inspect The RPM And APT Databases To List All The Packages Along With Executables, Service And Versions
- EvilSlackbot - A Slack Bot Phishing Framework For Red Teaming Exercises
- Reaper - Proof Of Concept On BYOVD Attack
- Ars0N-Framework - A Modern Framework For Bug Bounty Hunting
- Headerpwn - A Fuzzer For Finding Anomalies And Analyzing How Servers Respond To Different HTTP Headers
- LDAPWordlistHarvester - A Tool To Generate A Wordlist From The Information Present In LDAP, In Order To Crack Passwords Of Domain Accounts
- Pyrit - The Famous WPA Precomputed Cracker
- SherlockChain - A Streamlined AI Analysis Framework For Solidity, Vyper And Plutus Contracts
- Domainim - A Fast And Comprehensive Tool For Organizational Network Scanning
- JA4+ - Suite Of Network Fingerprinting Standards
- Google Dork: #red-team #red-teaming
- #red-teaming
- #red-team
- #redteaming
- #redteam
- #pentest
- #pentesting
- #bug-bounty
- #bugbounty